note 78196 deleted from function.eval by ezyang

Note Submitter: php at guyblade dot com ---- The eval usage suggested below by nicolas may, in fact, execute something. if you give his eval_syntax the string "print 'in jail'; } else { ob_end_clean(); print 'free at last'; ob_start();" then you will see the string 'free at last' being printed. This could easily be replaced with something malicious if it is used wantonly. This problem could be prevented by checking to see that braces are balanced AND properly ordered as merely being balanced is insufficient to prevent the code from being executed.